Your Privacy Matters
at 9c999

1 Introduction

9c999 is an online betting and casino entertainment platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are committed to safeguarding your privacy and handling your personal information with the utmost care, integrity, and transparency.

This Policy applies to all personal data we collect through the 9c999 website (9c999.io), our customer support channels, our payment processing interactions, and any other touchpoints through which you provide information to us. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are available on this site.

The effective date of this Policy is stated at the top of this page. Where we make material changes to this Policy, we will notify you via the email address registered to your account and update the effective date accordingly.

2 Personal Data We Collect

We collect personal data in two principal ways: data you provide directly to us, and data collected automatically through your use of the Platform.

Data you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address, provided when you create your 9c999 account.
• Identity verification (KYC) data: Government-issued photo identification (National ID, passport, or driving licence), proof of address documents, and proof of payment method, submitted during our Know Your Customer verification process.
• Financial data: Mobile wallet identifiers (bKash, Nagad, Rocket, or Upay account numbers), deposit and withdrawal amounts, and transaction history. We do not store full card numbers or banking credentials.
• Communications data: Messages, enquiries, complaints, and feedback you send to us via live chat, email ([email protected]), or WhatsApp reference channels.
• Responsible gaming data: Self-imposed deposit limits, cooling-off periods, self-exclusion requests, and any disclosures relating to problem gambling, shared voluntarily with our support team.

Data collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on each page, game sessions played, betting history, search queries within the Platform, and click patterns.
• Session data: Login timestamps, session duration, geographic location (country/city level, derived from IP address), and language preferences.
• Cookie data: Preferences, session tokens, and analytics identifiers set via cookies as described in Clause 6 of this Policy.

3 How We Use Your Personal Data

9c999 uses your personal data only for the purposes described below. We do not use your data in any manner that is incompatible with the original purpose for which it was collected without first obtaining your consent or where another lawful basis applies.

• Account management: To create, maintain, and administer your player account, including processing login authentication, account balance management, and preference settings.
• Transaction processing: To process deposits via bKash, Nagad, Rocket, and Upay, settle winnings, and execute withdrawal requests to your registered payment method.
• Identity verification: To verify your age (21+ requirement), identity, and source of funds in compliance with our KYC and anti-money laundering obligations.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, match-fixing, and other prohibited conduct on the Platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance via live chat, email, and WhatsApp reference.
• Regulatory compliance: To fulfil our legal obligations relating to record-keeping, reporting, and cooperation with lawful requests from relevant authorities.
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall quality, performance, and security of the 9c999 Platform.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour and to administer self-exclusion, deposit limit, and cooling-off mechanisms requested by players.
• Marketing communications: To send you promotional offers, bonus notifications, and updates about new games or features — only where you have opted in to receive such communications, and subject to your right to opt out at any time.

4 Legal Basis for Processing

9c999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and deliver the gaming services you have signed up for.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and lawful authority requests.
• Legitimate interests: Processing carried out for our legitimate business interests (fraud detection, security monitoring, Platform analytics, and improvement), provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw your consent at any time by contacting our support team or updating your account preferences.

5 Data Sharing & Disclosure

9c999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients only to the extent necessary to deliver our services or meet our legal obligations:

• Payment service providers: bKash, Nagad, Rocket, and Upay, solely for the purpose of processing deposit and withdrawal transactions initiated by you. These providers operate under their own privacy policies and are not permitted to use your data for any other purpose.
• Game content providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and others) may receive limited session data necessary to operate their games on the Platform. No personally identifiable information is shared beyond what is technically necessary.
• Identity verification services: Third-party KYC and fraud-detection service providers engaged by 9c999 to assist with age verification and anti-money laundering checks. These providers process data strictly under our instructions and are bound by confidentiality obligations.
• IT infrastructure providers: Cloud hosting, database, and cybersecurity service providers who store or process Platform data on 9c999's behalf, subject to appropriate data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or at the lawful request of a regulatory or law enforcement authority, 9c999 may disclose personal data without prior notice to you.

6 Cookies & Tracking Technologies

9c999 uses cookies and similar tracking technologies to provide a functional, personalised, and secure Platform experience. A cookie is a small text file placed on your device by the Platform when you visit. The following types of cookies are used:

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional or analytics cookies will not prevent you from using core Platform features.

7 Data Retention

9c999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required by applicable legal and regulatory obligations.

• Active account data: Retained for the duration of your registered account and for a period of at least 5 years following the closure of your account, to meet our anti-money laundering and regulatory record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission, or such longer period as may be required by applicable law.
• Transaction records: Retained for a minimum of 5 years in accordance with financial record-keeping requirements.
• Customer support communications: Retained for up to 3 years from the date of the last interaction, for quality assurance, dispute resolution, and training purposes.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications, plus 2 years following opt-out, to demonstrate compliance with consent obligations.
• Anonymised analytics data: May be retained indefinitely in aggregated, anonymised form that cannot be linked back to any individual player.

When personal data is no longer required and the applicable retention period has expired, 9c999 will securely delete or anonymise the data in accordance with our internal data destruction procedures.

8 Data Security

9c999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 9c999 Platform.
• Encryption of sensitive data at rest, including identity documents and payment references.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Regular security vulnerability assessments and penetration testing of our Platform infrastructure.
• Two-factor authentication (2FA) options available to all registered players to protect account access.
• Continuous monitoring for suspicious login activity, unusual account behaviour, and potential data breach indicators.
• Staff training on data protection obligations and secure data handling practices.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 9c999 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

9 Your Data Subject Rights

As a data subject, you hold the following rights in relation to your personal data held by 9c999. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. We will respond to all verified requests within 30 days of receipt.

• Right of Access (Subject Access Request): You may request a copy of all personal data we hold about you, free of charge, in a portable and readable format. We will provide this within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Minor corrections (such as a typo in your registered address) can be processed directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies. Please note that we may be unable to erase data that we are legally required to retain (for example, transaction records subject to a minimum 5-year retention requirement).
• Right to Restrict Processing: You may request that we suspend processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint is pending.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) for transfer to another service provider.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, in which case we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights Related to Automated Decision-Making: Where 9c999 makes decisions about your account that are based solely on automated processing (for example, automated fraud detection leading to account restriction), you have the right to request human review of that decision.

10 Children & Minors

The 9c999 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If you are under 21, you must not register an account, attempt to use the Platform, or submit any personal data to us.

If 9c999 becomes aware that personal data has been collected from a person under the age of 21 — whether through a falsified date of birth during registration or any other means — we will take immediate steps to deactivate the relevant account, delete the data, and, where appropriate, report the matter to relevant authorities in accordance with our legal obligations.

Parents and guardians are strongly encouraged to install and configure parental control software to prevent minors from accessing online gambling websites. If you believe a minor has registered an account on the 9c999 Platform, please contact us immediately at [email protected].

11 Third-Party Links & Services

The 9c999 Platform may contain references or indirect connections to third-party services — for example, payment gateways operated by bKash, Nagad, Rocket, or Upay, or game content delivered by providers such as Pragmatic Play, Evolution Gaming, Spribe, or Ezugi. When you interact with a third-party service, that service is governed by its own privacy policy, which is independent of this Policy.

9c999 is not responsible for the data collection, storage, or processing practices of any third-party service provider, payment processor, or game studio. We encourage you to review the privacy policies of any third-party services you interact with when using the Platform.

Links or references to third-party services on this Platform do not constitute an endorsement by 9c999 of those services or their privacy practices. If you have concerns about how a third-party provider handles your data, please contact that provider directly.

12 Changes to This Privacy Policy

9c999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing activities, legal obligations, or business practices. Where a material change is made — meaning a change that significantly affects your rights or the way we use your data — we will notify you by email to the address registered to your account at least 7 days before the updated Policy comes into effect.

For minor or non-material updates (such as corrections to wording, clarifications, or formatting improvements), we may update the Policy without direct notification, and the effective date at the top of this page will be updated to reflect the date of the change.

We encourage you to review this Privacy Policy periodically. The most current version will always be available at 9c999.io/privacy-policy. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Platform and may request closure of your account.

13 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data subject rights, please contact the 9c999 Data & Privacy team using the following channels:

• Live Chat: Available 24/7 from within your registered 9c999 account dashboard. This is the fastest channel for data-related enquiries.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" as appropriate. Allow up to 30 days for a full response to formal data subject requests, and up to 48 hours for general privacy enquiries.
• WhatsApp (plain text reference only): +880 1700 000000 — this number is provided as a plain text reference only and is not a clickable link. For formal data subject requests, please use email.

Our support team operates 24 hours a day, 7 days a week, 365 days a year, on Bangladesh Standard Time (BST, UTC+6). We are committed to acknowledging all privacy-related enquiries within 48 hours and resolving formal data subject requests within the 30-day statutory period.